← CVE Intelligence

CVE-2026-1198

SQL Injection in SIMPLE.ERP PUBLISHED

Description (CNA)

SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input validation allows an authenticated attacker to prepare a malicious query to the database that will be executed. This issue was fixed in 6.30@A04.4_u06.

Affected (CNA)

Vendor / productVersions
Simple SA / Simple.ERPaffected 0 before 6.30@A04.4_u06

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.